Overview

HSM Attest is an architecture for large backend systems that protects core data even during a total host compromise. Master secrets are isolated in an HSM core, which only releases short-lived or limited-scope derived keys to Confidential Computing enclaves after the workload successfully attests itself against an HSM whitelist. It drastically reduces the blast radius of runtime data compromise.

Strong, tightly defined and auditable Governance protects the HSM Core and its contents from all but explicitly allowed actors and actions. Provides Exclusion of hosting providers and internal attackers.

HSMAttest consists of an architecture, an implementation, associated tools to support operations and a catalogue of best practices to integrate HSMAttest into Secure Software Supply chains and Operating processes.

Using HSMAttest

Differing deployment models are possible, including:

• Development SDK (with Consultancy)
• OEM and White Label Repackaging
• Preconfigured, hosted, supported and customisable Managed Services

Background

White Papers:

• Attributes of a Successful Secure Cloud Ecosystem
• Quick Introduction to HSMAttest

Presentations (slide PDFs):

• Trends in Security Threats
• Trends in Security Measures